Request ID: 114018 - TVM Analyst - Vulnerability Assessment & Management

Job Description: TVM Analyst responsible for enterprise vulnerability assessment, risk analysis, remediation tracking, reporting, and vulnerability management across infrastructure, applications, endpoints, networks, and cloud environments.
Location: Brampton, ON - Hybrid (2-3 Days WFO)
Contract Duration: 6-12 Month ContractKey Responsibilities

• Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.
• Configure, execute, and monitor vulnerability scans using Qualys VMDR, Tenable/Nessus, Rapid7 InsightVM, or similar platforms.
• Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.
• Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.
• Work closely with infrastructure, security, and application teams to coordinate remediation efforts.
• Monitor vulnerability remediation activities against defined SLAs and escalate overdue or high-risk findings.
• Support vulnerability exception and risk acceptance processes while maintaining proper documentation.
• Develop vulnerability management dashboards, metrics, KPIs, and executive reports.
• Investigate emerging vulnerabilities and assess their impact on the organization's technology environment.
• Support vulnerability assessments related to zero-day threats, major security advisories, and actively exploited vulnerabilities.
• Identify recurring vulnerabilities and recommend security improvements to reduce overall risk exposure.
• Assist with process improvements, automation initiatives, and optimization of vulnerability scanning coverage.
• Maintain accurate records of assets, vulnerabilities, remediation status, and approved exceptions.

Core Qualifications

• 6-8 years of experience in Cybersecurity, Vulnerability Management, Information Security, or a related field.
• Hands-on experience with vulnerability management platforms including:
  • Qualys VMDR
  • Tenable Vulnerability Management
  • Nessus
  • Rapid7 InsightVM
• Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
• Strong knowledge of:
  • CVSS
  • CVE
  • CWE
  • CPE
  • Risk-Based Vulnerability Prioritization
• Experience managing vulnerabilities across enterprise environments.
• Strong understanding of:
  • Operating Systems
  • Networking
  • Databases
  • Web Applications
  • Enterprise Infrastructure
• Experience analyzing vulnerability findings and recommending remediation strategies.
• Strong understanding of patch management and remediation processes.
• Experience translating technical findings into actionable recommendations.
• Excellent analytical, communication, documentation, and stakeholder management skills.

Preferred Qualifications

• Experience supporting vulnerability management across on-premises, cloud, and hybrid environments.
• Knowledge of AWS, Azure, and GCP security services.
• Familiarity with:
  • CISA KEV
  • Threat Intelligence
  • Active Exploit Monitoring
• Experience developing vulnerability dashboards and remediation tracking reports.
• Exposure to automation and scripting using:
  • Python
  • PowerShell
• Experience improving vulnerability management programs and operational processes.

Key Skills

• Vulnerability Management
• Vulnerability Assessments
• Qualys VMDR
• Tenable
• Nessus
• Rapid7 InsightVM
• Cyber Security
• Information Security
• CVSS
• CVE
• CWE
• CPE
• Risk Assessment
• Patch Management
• Threat Intelligence
• Security Operations
• Cloud Security
• AWS Security
• Azure Security
• GCP Security
• Security Reporting
• Security Dashboards
• Python
• PowerShell
• Remediation Management